v1.2.0

• Default high-level password hashing now uses bcrypt.
• Added token storage hash helpers, HMAC-SHA256 helpers, and SHA-256 checksum helpers.
• Added stronger rehash policy support for login-time migration.
• Hardened verification paths with practical resource limits.
• Improved malformed bcrypt handling in the high-level Verify API.
• Added CI coverage for tests, vet, race tests, and benchmark smoke checks.
• Expanded English and Chinese documentation and examples.

Notes

• bcrypt passwords are limited to 72 bytes.
• Token helpers are intended for generated high-entropy tokens, not short verification codes or passwords.
• Legacy APIs remain available for migration and compatibility.